KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2)

Status: moderation: reported on 2026/09/03 18:38
Subsystems: usb
Labels: race:benign
[Documentation on labels]
Reported-by: syzbot+0af89f15944b631560f2@syzkaller.appspotmail.com
First crash: 46m, last: 46m
✨ AI Jobs (1)
ID Workflow Result Correct Bug Created Started Finished Revision
d34ba0e1 assessment-kcsan Benign: ✅ KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add (2) 2026/09/03 18:38 2026/09/03 18:38 2026/09/03 19:08 d2e5fb95
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add usb 6 1 580d 580d 0/29 auto-obsoleted due to no activity on 2025/03/28 09:19

Sample crash report:
==================================================================
BUG: KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add

write to 0xffff888101730080 of 4 bytes by task 8813 on cpu 0:
 mon_reader_add+0x72/0x1d0 drivers/usb/mon/mon_main.c:50
 mon_bin_open+0x321/0x3a0 drivers/usb/mon/mon_bin.c:722
 chrdev_open+0x2eb/0x3a0 fs/char_dev.c:411
 do_dentry_open+0x49f/0xa60 fs/open.c:996
 vfs_open+0x37/0x1e0 fs/open.c:1101
 do_open fs/namei.c:4837 [inline]
 path_openat+0xc01/0x10d0 fs/namei.c:5000
 do_file_open+0x16c/0x290 fs/namei.c:5029
 do_sys_openat2+0xa0/0x130 fs/open.c:1417
 do_sys_open fs/open.c:1423 [inline]
 __do_sys_openat fs/open.c:1439 [inline]
 __se_sys_openat fs/open.c:1434 [inline]
 __x64_sys_openat+0xf2/0x120 fs/open.c:1434
 x64_sys_call+0x1f72/0x2550 arch/x86/include/generated/asm/syscalls_64.h:258
 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline]
 do_syscall_64+0x112/0x360 arch/x86/entry/syscall_64.c:84
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff888101730080 of 4 bytes by interrupt on cpu 1:
 usbmon_urb_complete include/linux/usb/hcd.h:737 [inline]
 __usb_hcd_giveback_urb+0x131/0x310 drivers/usb/core/hcd.c:1643
 usb_giveback_urb_bh+0x161/0x240 drivers/usb/core/hcd.c:1691
 process_one_work kernel/workqueue.c:3396 [inline]
 process_scheduled_works+0x56a/0xa50 kernel/workqueue.c:3479
 bh_worker+0x231/0x3b0 kernel/workqueue.c:3782
 workqueue_softirq_action+0xab/0xc0 kernel/workqueue.c:3810
 tasklet_hi_action+0xe/0x30 kernel/softirq.c:1003
 handle_softirqs+0xcc/0x2a0 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0x44/0xe0 kernel/softirq.c:767
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0x74/0x80 arch/x86/kernel/apic/apic.c:1062
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
 finish_task_switch+0x12b/0x340 kernel/sched/core.c:5371
 context_switch kernel/sched/core.c:5523 [inline]
 __schedule+0x79e/0xd20 kernel/sched/core.c:7270
 __schedule_loop kernel/sched/core.c:7347 [inline]
 schedule+0x5b/0xa0 kernel/sched/core.c:7362
 smpboot_thread_fn+0x375/0x520 kernel/smpboot.c:156
 kthread+0x223/0x270 kernel/kthread.c:436
 ret_from_fork+0x146/0x330 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

value changed: 0x00000000 -> 0x00000001

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(lazy) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
==================================================================

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/03 18:38 upstream 8ab1afb2eb24 6a988719 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-kcsan-gce KCSAN: data-race in __usb_hcd_giveback_urb / mon_reader_add
* Struck through repros no longer work on HEAD.